CVE-2014-9218

phpMyAdmin <4.0.10.7-4.2.13.1 - DoS

Title source: llm
STIX 2.1

Description

libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long password.

Exploits (1)

exploitdb WORKING POC
by Javer Nieto & Andres Rojas · textdosphp
https://www.exploit-db.com/exploits/35539

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2015/dsa-3382
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/71434
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2014:243
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/99140

Scores

EPSS 0.1527
EPSS Percentile 94.7%

Details

CWE
CWE-399
Status published
Products (48)
phpmyadmin/phpmyadmin 4.0.0 (3 CPE variants)
phpmyadmin/phpmyadmin 4.0.1
phpmyadmin/phpmyadmin 4.0.2
phpmyadmin/phpmyadmin 4.0.3
phpmyadmin/phpmyadmin 4.0.4
phpmyadmin/phpmyadmin 4.0.4.1
phpmyadmin/phpmyadmin 4.0.4.2
phpmyadmin/phpmyadmin 4.0.5
phpmyadmin/phpmyadmin 4.0.6
phpmyadmin/phpmyadmin 4.0.7
... and 38 more
Published Dec 08, 2014
Tracked Since Feb 18, 2026